Which technique can an intruder use to try to evade detection by a Snort sensor?
A) exceed the maximum number of fragments that a sensor can evaluate
B) split the malicious payload over several fragments to mask the attack signature
C) disable a sensor by exceeding the number of packets that it can fragment before forwarding
D) send more packet fragments than the destination host can reassemble, to disable the host without regard to any intrusion-detection devices that might be on the network

Question

Quizplus · Accepted Answer

Splitting the malicious payload over several fragments can help mask the attack signature, making it harder for Snort to detect the attack.

Which Technique Can an Intruder Use to Try to Evade